- name: Setup Go environment
  uses: actions/[email protected]
  with:
    # The Go version to download (if necessary) and use. Supports semver spec and ranges.
    go-version: # optional
    # Path to the go.mod or go.work file.
    go-version-file: # optional
    # Set this option to true if you want the action to always check for the latest available version that satisfies the version spec
    check-latest: # optional
    # Used to pull node distributions from go-versions. Since there's a default, this is typically not supplied by the user. When running this action on github.com, the default value is sufficient. When running on GHES, you can pass a personal access token for github.com if you are experiencing rate limiting.
    token: # optional, default is ${{ github.server_url == 'https://github.com' && github.token || '' }}
    # Used to specify whether caching is needed. Set to true, if you'd like to enable caching.
    cache: # optional, default is true
    # Used to specify the path to a dependency file - go.sum
    cache-dependency-path: # optional
    # Target architecture for Go to use. Examples: x86, x64. Will use system architecture by default.
    architecture: # optional

*Total -- 4,409.33kb -> 4,052.40kb (8.09%)

/contributor-docs/onboarding/as_open_project.png -- 38.87kb -> 30.66kb (21.12%)
/firebase-storage/src/test/resources/assets/flubbertest.jpg -- 3,288.78kb -> 2,971.47kb (9.65%)
/firebase-appdistribution/test-app/src/main/res/mipmap-xxxhdpi/ic_launcher.png -- 10.40kb -> 9.54kb (8.33%)
/firebase-appdistribution/test-app/src/main/res/mipmap-xxhdpi/ic_launcher.png -- 7.72kb -> 7.27kb (5.88%)
/firebase-appdistribution/src/main/res/drawable-xxhdpi/ic_rate_review.png -- 0.72kb -> 0.70kb (3.12%)
/health-metrics/apk-size/app/src/main/res/mipmap-hdpi/ic_launcher.png -- 3.34kb -> 3.24kb (2.9%)
/firebase-storage/src/test/resources/assets/image.jpg -- 1,051.18kb -> 1,021.39kb (2.83%)
/firebase-appdistribution/test-app/src/main/res/mipmap-hdpi/ic_launcher.png -- 3.51kb -> 3.43kb (2.14%)
/firebase-appdistribution/test-app/src/main/res/mipmap-xhdpi/ic_launcher.png -- 4.81kb -> 4.71kb (2.07%)

Signed-off-by: ImgBotApp <[email protected]>

Push automatic

Push automatic

- name: Upload a Build Artifact
  uses: actions/[email protected]
  with:
    # Artifact name
    name: # optional, default is artifact
    # A file, directory or wildcard pattern that describes what to upload
    path: 
    # The desired behavior if no files are found using the provided path.
Available Options:
  warn: Output a warning but do not fail the action
  error: Fail the action with an error message
  ignore: Do not output any warnings or errors, the action does not fail

    if-no-files-found: # optional, default is warn
    # Duration after which artifact will expire in days. 0 means using default retention.
Minimum 1 day. Maximum 90 days unless changed from the repository settings page.

    retention-days: # optional

- .github/workflows/sessions-e2e.yml

- name: Upload a Build Artifact
  uses: actions/[email protected]
  with:
    # Artifact name
    name: # optional, default is artifact
    # A file, directory or wildcard pattern that describes what to upload
    path: 
    # The desired behavior if no files are found using the provided path.
Available Options:
  warn: Output a warning but do not fail the action
  error: Fail the action with an error message
  ignore: Do not output any warnings or errors, the action does not fail

    if-no-files-found: # optional, default is warn
    # Duration after which artifact will expire in days. 0 means using default retention.
Minimum 1 day. Maximum 90 days unless changed from the repository settings page.

    retention-days: # optional

- name: Upload a Build Artifact
  uses: actions/[email protected]
  with:
    # Artifact name
    name: # optional, default is artifact
    # A file, directory or wildcard pattern that describes what to upload
    path: 
    # The desired behavior if no files are found using the provided path.
Available Options:
  warn: Output a warning but do not fail the action
  error: Fail the action with an error message
  ignore: Do not output any warnings or errors, the action does not fail

    if-no-files-found: # optional, default is warn
    # Duration after which artifact will expire in days. 0 means using default retention.
Minimum 1 day. Maximum 90 days unless changed from the repository settings page.

    retention-days: # optional

name: Firebase Sessions E2E Tests

on:
  schedule:
    - cron: 24 */4 * * *  # every 4 hours at 24 minutes past the hour
  workflow_dispatch:     # allow triggering the workflow manually

concurrency:
  group: ${{ github.workflow }}

env:
  SESSIONS_E2E_GOOGLE_SERVICES: ${{ secrets.SESSIONS_E2E_GOOGLE_SERVICES }}

jobs:
  test:

    runs-on: ubuntu-latest

    steps:
      - name: Checkout firebase-sessions
        uses: actions/[email protected]

      - name: set up JDK 11
        uses: actions/setup-java@v3
        with:
          java-version: '11'
          distribution: 'temurin'
          cache: gradle

      - name: Add google-services.json
        run: |
          echo $SESSIONS_E2E_GOOGLE_SERVICES | base64 -d > google-services.json

      - uses: google-github-actions/auth@v0
        with:
          credentials_json: ${{ secrets.GCP_SERVICE_ACCOUNT }}
      - uses: google-github-actions/setup-gcloud@v0
      - name: Run sessions end-to-end tests
        env:
          FTL_RESULTS_BUCKET: fireescape
        run: |
          - check: gradlew :firebase-sessions:test-app:device Check with Error Prone -PtargetBackend="prod"
- name: Upload a Build Artifact
  uses: actions/[email protected]
  with:
    # Artifact name
    name: # optional, default is artifact
    # A file, directory or wildcard pattern that describes what to upload
    path: 
    # The desired behavior if no files are found using the provided path.
Available Options:
  warn: Output a warning but do not fail the action
  error: Fail the action with an error message
  ignore: Do not output any warnings or errors, the action does not fail

    if-no-files-found: # optional, default is warn
    # Duration after which artifact will expire in days. 0 means using default retention.
Minimum 1 day. Maximum 90 days unless changed from the repository settings page.

    retention-days: # optional

name: Firebase Sessions E2E Tests

on:
  schedule:
    - cron: 24 */4 * * *  # every 4 hours at 24 minutes past the hour
  workflow_dispatch:     # allow triggering the workflow manually

concurrency:
  group: ${{ github.workflow }}

env:
  SESSIONS_E2E_GOOGLE_SERVICES: ${{ secrets.SESSIONS_E2E_GOOGLE_SERVICES }}

jobs:
  test:

    runs-on: ubuntu-latest

    steps:
      - name: Checkout firebase-sessions
        uses: actions/[email protected]

      - name: set up JDK 11
        uses: actions/setup-java@v3
        with:
          java-version: '11'
          distribution: 'temurin'
          cache: gradle

      - name: Add google-services.json
        run: |
          echo $SESSIONS_E2E_GOOGLE_SERVICES | base64 -d > google-services.json

      - uses: google-github-actions/auth@v0
        with:
          credentials_json: ${{ secrets.GCP_SERVICE_ACCOUNT }}
      - uses: google-github-actions/setup-gcloud@v0
      - name: Run sessions end-to-end tests
        env:
          FTL_RESULTS_BUCKET: fireescape
        run: |
          - check: gradlew/firebase-sessions:test-app:device Check with Error Prone -PtargetBackend="prod"
- name: Upload a Build Artifact
  uses: actions/[email protected]
  with:
    # Artifact name
    name: # optional, default is artifact
    # A file, directory or wildcard pattern that describes what to upload
    path: 
    # The desired behavior if no files are found using the provided path.
Available Options:
  warn: Output a warning but do not fail the action
  error: Fail the action with an error message
  ignore: Do not output any warnings or errors, the action does not fail

    if-no-files-found: # optional, default is warn
    # Duration after which artifact will expire in days. 0 means using default retention.
Minimum 1 day. Maximum 90 days unless changed from the repository settings page.

    retention-days: # optional

Bumps com.android.tools.build:gradle from 7.4.2 to 8.1.1.

---
updated-dependencies:
- dependency-name: com.android.tools.build:gradle
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps net.ltgt.gradle:gradle-errorprone-plugin from 1.3.0 to 3.1.0.

---
updated-dependencies:
- dependency-name: net.ltgt.gradle:gradle-errorprone-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps com.google.protobuf:protobuf-java-util from 3.21.11 to 3.24.3.

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

 - name: Upload a Build Artifact
  uses: actions/[email protected]
  with:
    # Artifact name
    name: # optional, default is artifact
    # A file, directory or wildcard pattern that describes what to upload
    path: 
    # The desired behavior if no files are found using the provided path.
Available Options:
  warn: Output a warning but do not fail the action
  error: Fail the action with an error message
  ignore: Do not output any warnings or errors, the action does not fail

    if-no-files-found: # optional, default is warn
    # Duration after which artifact will expire in days. 0 means using default retention.
Minimum 1 day. Maximum 90 days unless changed from the repository settings page.

    retention-days: # optional

- name: Upload a Build Artifact
  uses: actions/[email protected]
  with:
    # Artifact name
    name: # optional, default is artifact
    # A file, directory or wildcard pattern that describes what to upload
    path: 
    # The desired behavior if no files are found using the provided path.
Available Options:
  warn: Output a warning but do not fail the action
  error: Fail the action with an error message
  ignore: Do not output any warnings or errors, the action does not fail

    if-no-files-found:# optional, default is warn
    # Duration after which artifact will expire in days. 0 means using default retention.
Minimum 1 day. Maximum 90 days unless changed from the repository settings page.

    retention-days: # optional

- name: Run test on Autify for Mobile
  # You may pin to the exact commit or the version.
  # uses: autifyhq/actions-mobile-test-run@8fd7241
  uses: autifyhq/[email protected]
   with:
    # Access token of Autify for Mobile.
    access-token: 
    # URL of a test plan e.g. https://moible-app.autify.com/projects/<ID>/test_plans/<ID>
    autify-test-url: 
    # ID of the already uploaded build. (Note: Either build-id or build-path is required but not both)
    build-id: # optional
    # File path to the iOS app (*.app) or Android app (*.apk). (Note: Either build-id or build-path is required but not both)
    build-path: # optional
    # When true, the action waits until the test finishes.
    wait: # optional, default is false
    # Timeout seconds when waiting.
    timeout: # optional
    # Maximum retry count while waiting. The command can take up to `timeout * (max-retry-count + 1)`. Only effective with `wait`
    max-retry-count: # optional
    # A path to `autify` which will be used to invoke Autify CLI internally. Default is searching from PATH.
    autify-path: # optional, default is autify
    # Autify CLI installer URL
    autify-cli-installer-url: # optional, default is https://autify-cli-assets.s3.amazonaws.com/autify-cli/channels/stable/install-cicd.bash

- name: Deploy HelmFile
  # You may pin to the exact commit or the version.
  # uses: cloudposse/github-action-deploy-helmfile@e539612
uses: cloudposse/[email protected]
  with:
    # Cluster name
    cluster: 
    # AWS region
    aws-region: # optional, default is us-east-1
    # The path where lives the helmfile.
    helmfile-path: # optional, default is deploy
    # Helmfile name
    helmfile: # optional, default is helmfile.yaml
    # Operation with helmfiles. (valid options - `deploy`, `destroy`)
    operation: # default is deploy
    # Helmfile environment
    environment: # optional, default is preview
    # Git SHA
    gitref-sha: # optional, default is 
    # Kubernetes namespace
    namespace: 
    # Docker image
    image: 
    # Docker image tag
    image-tag: 
    # Debug mode
    debug: # optional, default is false
    # The name of the label used to describe the helm release
    release_label_name: # optional, default is release
    # YAML string with extra values to use in a helmfile deploy
    values_yaml: # optional
    # Helm version
    helm_version: # optional, default is 3.11.1
    # Helmfile version
    helmfile_version: # optional, default is 0.143.5
    # Kubectl version
    kubectl_version: # optional, default is 1.26.3
    # Kubectl version
    chamber_version: # optional, default is 2.11.1
    - name: Rational Test Automation Server GitHub Action
  # You may pin to the exact commit or the version.
  # uses: IBM/devopsauto-testserver-actions@c704855
  uses: IBM/devopsauto-testserver-actions@v1
  with:
    # Rational Test Automation Server URL
    serverUrl: 
    # Rational Test Automation Server Offline Token
    offlineToken: 
    # Team Space name
    teamspace: 
    # Project name
    project: 
    # Branch name in which the test exists
    branch: 
    # AssetId of the test in Rational Test Automation Server.
    assetId: 
    # Optional. Test environment corresponding to the test. Mandatory to input the value if you want to run API test.
    environment: # optional
    # Optional. Comma (,) delimited values of datasets for the job to run, For example: source:replacement;source:replacement
    datasets: # optionaloptional
    # Optional. Variables corresponding to the test. You must enter the variables in the format: name_of_the_variable=value_of_the_variable
    variables: # optional
    # Optional. Labels corresponding to the test. For example: label1, label2
    labels: # optional
    # Optional. Secrets collection name for the job to run.
    secretsCollection: #

- name: Setup Java JDK
  uses: actions/[email protected]
  runs-on:
    # The Java version to set up. Takes a whole or semver Java version. See examples of supported syntax in README file
    java-version: # optional
    # The path to the `.java-version` file. See examples of supported syntax in README file
    java-version-file: # optional
    # Java distribution. See the list of supported distributions in README file
    distribution: 
    # The package type (jdk, jre, jdk+fx, jre+fx)
    java-package: # optional, default is jdk
    # The architecture of the package (defaults to the action runner's architecture)
    architecture: # optional
    # Path to where the compressed JDK is located
    jdkFile: # optional
    # Set this option if you want the action to check for the latest available version that satisfies the version spec
    check-latest: # optional
    # ID of the distributionManagement repository in the pom.xml file. Default is `github`
    server-id: # optional, default is github
    # Environment variable name for the username for authentication to the Apache Maven repository. Default is $GITHUB_ACTOR
    server-username: # optional, default is GITHUB_ACTOR
    # Environment variable name for password or token for authentication to the Apache Maven repository. Default is $GITHUB_TOKEN
    server-password: # optional, default is GITHUB_TOKEN
    # Path to where the settings.xml file will be written. Default is ~/.m2.
    settings-path: # optional
    # Overwrite the settings.xml file if it exists. Default is "true".
    overwrite-settings: # optional, default is true
    # GPG private key to import. Default is empty string.
    gpg-private-key: # optional
    # Environment variable name for the GPG private key passphrase. Default is $GPG_PASSPHRASE.
    gpg-passphrase: # optional
    # Name of the build platform to cache dependencies. It can be "maven", "gradle" or "sbt".
    cache: # optional
    # Workaround to pass job status to post job step. This variable is not intended for manual setting
    job-status: # optional, default is ${{ job.status }}
    # The token used to authenticate when fetching version manifests hosted on github.com, such as for the Microsoft Build of OpenJDK. When running this action on github.com, the default value is sufficient. When running on GHES, you can pass a personal access token for github.com if you are experiencing rate limiting.
    token: # optional, default is ${{ github.server_url == 'https://github.com' && github.token || '' }}
    # Name of Maven Toolchain ID if the default name of "${distribution}_${java-version}" is not wanted. See examples of supported syntax in Advanced Usage file
    mvn-toolchain-id: # optional
    # Name of Maven Toolchain Vendor if the default name of "${distribution}" is not wanted. See examples of supported syntax in Advanced Usage file
    mvn-toolchain-vendor: # optional

Update fireperf-e2e.yml

Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) and [google-gax](https://github.com/googleapis/gax-nodejs). These dependencies needed to be updated together.

Updates `protobufjs` from 7.2.3 to 7.2.4
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.2.3...protobufjs-v7.2.4)

Updates `google-gax` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/googleapis/gax-nodejs/releases)
- [Changelog](https://github.com/googleapis/gax-nodejs/blob/main/release-please-config.json)
- [Commits](googleapis/gax-nodejs@v3.6.0...v3.6.1)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-type: indirect
- dependency-name: google-gax
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

…tests/src/androidTest/backend/functions/functions/protobufjs-and-google-gax-7.2.4

Bump protobufjs and google-gax in /smoke-tests/src/androidTest/backend/functions/functions

…tests/src/androidTest/backend/functions/functions/word-wrap-1.2.5

Bump word-wrap from 1.2.3 to 1.2.5 in /smoke-tests/src/androidTest/backend/functions/functions

…tests/src/androidTest/backend/functions/functions/semver-7.5.4

Bump semver from 7.5.0 to 7.5.4 in /smoke-tests/src/androidTest/backend/functions/functions

Update build-release-artifacts.yml

…otobuf-protobuf-java-util-3.24.3

Bump com.google.protobuf:protobuf-java-util from 3.21.11 to 3.24.3

…le-gradle-errorprone-plugin-3.1.0

Bump net.ltgt.gradle:gradle-errorprone-plugin from 1.3.0 to 3.1.0

Bumps [com.google.protobuf:protobuf-gradle-plugin](https://github.com/google/protobuf-gradle-plugin) from 0.9.2 to 0.9.4.
- [Release notes](https://github.com/google/protobuf-gradle-plugin/releases)
- [Commits](google/protobuf-gradle-plugin@0.9.2...v0.9.4)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-gradle-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps `kotest` from 5.5.5 to 5.7.2.

Updates `io.kotest:kotest-runner-junit4-jvm` from 5.5.5 to 5.7.2
- [Release notes](https://github.com/kotest/kotest/releases)
- [Commits](kotest/kotest@v5.5.5...v5.7.2)

Updates `io.kotest:kotest-assertions-core-jvm` from 5.5.5 to 5.7.2
- [Release notes](https://github.com/kotest/kotest/releases)
- [Commits](kotest/kotest@v5.5.5...v5.7.2)

Updates `io.kotest:kotest-property-jvm` from 5.5.5 to 5.7.2
- [Release notes](https://github.com/kotest/kotest/releases)
- [Commits](kotest/kotest@v5.5.5...v5.7.2)

---
updated-dependencies:
- dependency-name: io.kotest:kotest-runner-junit4-jvm
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.kotest:kotest-assertions-core-jvm
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.kotest:kotest-property-jvm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

…otobuf-protobuf-gradle-plugin-0.9.4

Bump com.google.protobuf:protobuf-gradle-plugin from 0.9.2 to 0.9.4

…ools.build-gradle-8.1.1

Bump com.android.tools.build:gradle from 7.4.2 to 8.1.1

Create cmake-multi-platform.yml

Bump kotest from 5.5.5 to 5.7.2

ci: add .deepsource.toml

This commit fixes the style issues introduced in 775df73 according to the output
from Prettier.

Details: None

ci: add .deepsource.toml

style: format code with Prettier

ci: add .deepsource.toml

ci: add .deepsource.toml

[ImgBot] Optimize images

Configure Mend Bolt for GitHub

# Security Policy

## Supported Versions

 supported with security updates.

| Version | Supported          |
| ------- | ------------------ |
| 5.1.x   | ✅ |
| 5.0.x   | ❌                |
| 4.0.x   | ✅ |
| < 4.0   | ❌                |

## Reporting a Vulnerability

 Report a vulnerability to the following:
wattsliftselecsys.blogspot.com
Expect to get an update automatically from the master branch.
Reported vulnerability, shall be accepted or
declined, depending on versions or third party.

- name: Mondoo Action
  # You may pin to the exact commit or the version.
  # uses: mondoohq/actions@3a67664
  uses: mondoohq/[email protected]
  with:
    # Additional arguments to pass to cnspec client.
    args: # optional
    # Sets the log level: error, warn, info, debug, trace (default "info")
    log-level: # optional, default is info
    # Base64 encoded service account credentials used to authenticate with Mondoo Platform
    service-account-credentials: # optional

- name: DeepSource Test Coverage Action
  # You may pin to the exact commit or the version.
  # uses: deepsourcelabs/test-coverage-action@5e821bd
  uses: DeepSourceCorp/[email protected]
  with:
    # Programming language shortcode for which coverage is reported. Allowed values are — python, go, javascript, ruby, java, kotlin, scala, php, csharp, cxx, rust, swift
    key: 
    # Path to the coverage data file. e.g. ./coverage.xml
    coverage-file: 
    # DeepSource DSN of this repository. It is available under Settings → Reporting tab of the repository page on DeepSource.
    dsn: 
    # Should the CI build fail if there is an error while uploading the report to DeepSource? Allowed values are — true, false
    fail-ci-on-error: # optional
    # HEAD commit for which the Test Coverage report is being sent
    commit-sha: # optional, default is ${{ github.event.pull_request.head.sha }}

- name: SecureStack All-In-One GitHub Action
  # You may pin to the exact commit or the version.
  # uses: SecureStackCo/actions-all-in-one@96dc79a
  uses: SecureStackCo/[email protected]
  with:
    # SecureStack API key - generate an API key at https://app.securestack.com
    securestack_api_key: 
    # SecureStack Application ID - can be retrieved by accessing required application at https://app.securestack.com
    securestack_app_id: 
    # Severities lower than this value will be reported in the workflow console but will not cause an error for the action; value should be one of: critical | high | medium | low
    severity: